vite - npm Package Compare versions

Comparing version 8.0.0 to 8.0.1

dist/client/client.mjs

 import "@vite/env";
-//#region \0@oxc-project+runtime@0.115.0/helpers/typeof.js
+//#region \0@oxc-project+runtime@0.120.0/helpers/typeof.js
 function _typeof(o) {
@@ -12,3 +12,3 @@ "@babel/helpers - typeof";
 //#endregion
-//#region \0@oxc-project+runtime@0.115.0/helpers/toPrimitive.js
+//#region \0@oxc-project+runtime@0.120.0/helpers/toPrimitive.js
 function toPrimitive(t, r) {
@@ -25,3 +25,3 @@ if ("object" != _typeof(t) || !t) return t;
 //#endregion
-//#region \0@oxc-project+runtime@0.115.0/helpers/toPropertyKey.js
+//#region \0@oxc-project+runtime@0.120.0/helpers/toPropertyKey.js
 function toPropertyKey(t) {
@@ -32,3 +32,3 @@ var i = toPrimitive(t, "string");
 //#endregion
-//#region \0@oxc-project+runtime@0.115.0/helpers/defineProperty.js
+//#region \0@oxc-project+runtime@0.120.0/helpers/defineProperty.js
 function _defineProperty(e, r, t) {
@@ -226,3 +226,3 @@ return (r = toPropertyKey(r)) in e ? Object.defineProperty(e, r, {
 //#endregion
-//#region ../../node_modules/.pnpm/nanoid@5.1.6/node_modules/nanoid/non-secure/index.js
+//#region ../../node_modules/.pnpm/nanoid@5.1.7/node_modules/nanoid/non-secure/index.js
 let urlAlphabet = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
@@ -229,0 +229,0 @@ let nanoid = (size = 21) => {

dist/node/module-runner.js

@@ -518,3 +518,3 @@ let SOURCEMAPPING_URL = "sourceMa";
 			let lastBinding = missingBindings[missingBindings.length - 1];
-			throw moduleType === "module" ? SyntaxError(`[vite] The requested module '${rawId}' does not provide an export named '${lastBinding}'`) : SyntaxError(`\
+			throw SyntaxError(moduleType === "module" ? `[vite] The requested module '${rawId}' does not provide an export named '${lastBinding}'` : `\
 [vite] Named export '${lastBinding}' not found. The requested module '${rawId}' is a CommonJS module, which may not support all module.exports as named exports.
@@ -530,3 +530,3 @@ CommonJS modules can always be imported via the default export, for example using:
 //#endregion
-//#region ../../node_modules/.pnpm/nanoid@5.1.6/node_modules/nanoid/non-secure/index.js
+//#region ../../node_modules/.pnpm/nanoid@5.1.7/node_modules/nanoid/non-secure/index.js
 let nanoid = (size = 21) => {
@@ -533,0 +533,0 @@ let id = "", i = size | 0;

package.json

 {
   "name": "vite",
-  "version": "8.0.0",
+  "version": "8.0.1",
   "type": "module",
@@ -63,7 +63,6 @@ "license": "MIT",
   "dependencies": {
-    "@oxc-project/runtime": "0.115.0",
     "lightningcss": "^1.32.0",
     "picomatch": "^4.0.3",
     "postcss": "^8.5.8",
-    "rolldown": "1.0.0-rc.9",
+    "rolldown": "1.0.0-rc.10",
     "tinyglobby": "^0.2.15"
@@ -82,9 +81,9 @@ },
     "@rollup/pluginutils": "^5.3.0",
-    "@vercel/detect-agent": "^1.1.0",
+    "@vercel/detect-agent": "^1.2.1",
     "@types/escape-html": "^1.0.4",
     "@types/pnpapi": "^0.0.5",
-    "@vitest/utils": "4.1.0-beta.6",
-    "@vitejs/devtools": "^0.0.0-alpha.33",
+    "@vitest/utils": "4.1.0",
+    "@vitejs/devtools": "^0.1.0",
     "artichokie": "^0.4.2",
-    "baseline-browser-mapping": "^2.10.0",
+    "baseline-browser-mapping": "^2.10.8",
     "cac": "^7.0.0",
@@ -98,3 +97,3 @@ "chokidar": "^3.6.0",
     "es-module-lexer": "^1.7.0",
-    "esbuild": "^0.27.3",
+    "esbuild": "^0.27.4",
     "escape-html": "^1.0.3",
@@ -109,3 +108,3 @@ "estree-walker": "^3.0.3",
     "mrmime": "^2.0.1",
-    "nanoid": "^5.1.6",
+    "nanoid": "^5.1.7",
     "obug": "^1.0.2",
@@ -122,7 +121,7 @@ "open": "^10.2.0",
     "resolve.exports": "^2.0.3",
-    "rolldown-plugin-dts": "^0.22.2",
+    "rolldown-plugin-dts": "^0.22.5",
     "rollup": "^4.59.0",
     "rollup-plugin-license": "^3.7.0",
-    "sass": "^1.97.3",
-    "sass-embedded": "^1.97.3",
+    "sass": "^1.98.0",
+    "sass-embedded": "^1.98.0",
     "sirv": "^3.0.2",
@@ -136,3 +135,3 @@ "strip-literal": "^3.1.0",
     "@types/node": "^20.19.0 || >=22.12.0",
-    "@vitejs/devtools": "^0.0.0-alpha.31",
+    "@vitejs/devtools": "^0.1.0",
     "esbuild": "^0.27.0",
@@ -139,0 +138,0 @@ "jiti": ">=1.21.0",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2178933

0.01%

Dependency count

18

-5.26%

Lines of code

56602

0.02%

Dependency changes

• + Added

  @rolldown/binding-android-arm64@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-darwin-arm64@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-darwin-x64@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-freebsd-x64@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-arm64-gnu@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-arm64-musl@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-ppc64-gnu@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-s390x-gnu@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-x64-gnu@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-linux-x64-musl@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-openharmony-arm64@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-wasm32-wasi@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-win32-arm64-msvc@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/binding-win32-x64-msvc@1.0.0-rc.10
  (transitive)

• + Added

  @rolldown/pluginutils@1.0.0-rc.10
  (transitive)

• + Added

  @vitejs/devtools@0.1.3
  (transitive)

• + Added

  @vitejs/devtools-kit@0.1.3
  (transitive)

• + Added

  @vitejs/devtools-rolldown@0.1.3
  (transitive)

• + Added

  @vitejs/devtools-rpc@0.1.3
  (transitive)

• + Added

  h3@1.15.8
  (transitive)

• + Added

  mlly@1.8.1
  (transitive)

• + Added

  rolldown@1.0.0-rc.10
  (transitive)

• - Removed

  @oxc-project/runtime@0.115.0

• - Removed

  @oxc-project/runtime@0.115.0
  (transitive)

• - Removed

  @rolldown/binding-android-arm64@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-darwin-arm64@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-darwin-x64@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-freebsd-x64@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-arm64-gnu@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-arm64-musl@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-ppc64-gnu@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-s390x-gnu@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-x64-gnu@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-linux-x64-musl@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-openharmony-arm64@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-wasm32-wasi@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-win32-arm64-msvc@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/binding-win32-x64-msvc@1.0.0-rc.9
  (transitive)

• - Removed

  @rolldown/pluginutils@1.0.0-rc.9
  (transitive)

• - Removed

  @vitejs/devtools@0.0.0-alpha.34
  (transitive)

• - Removed

  @vitejs/devtools-kit@0.0.0-alpha.34
  (transitive)

• - Removed

  @vitejs/devtools-rolldown@0.0.0-alpha.34
  (transitive)

• - Removed

  @vitejs/devtools-rpc@0.0.0-alpha.34
  (transitive)

• - Removed

  h3@1.15.9
  (transitive)

• - Removed

  mlly@1.8.2
  (transitive)

• - Removed

  rolldown@1.0.0-rc.9
  (transitive)

• Updated

  rolldown@1.0.0-rc.10